News

Apple outlines security changes in iTunes 8.1

By Charles Starrett ● Friday, March 13, 2009

Apple has published a new Knowledge Base document outlining the security changes in iTunes 8.1. According to “About the security content of iTunes 8.1,” the updated software fixes a bug which could allow a malicious podcast to request the user’s iTunes username and password via an authentication dialog box. The update fixes the issue by clarifying the origin of the authentication request in the dialog. In addition, iTunes 8.1 fixes an issue in which a maliciously crafted Digital Audio Access Protocol (DAAP) message could lead to a denial of service; the update addresses the issue by performing additional validation of DAAP messages. iTunes 8.1 is available now through Apple’s Software Update utility or as a direct download from apple.com/itunes. [via CNet]

Comments

1

iTunes 8.1 seems to have resolvedthe widely reported bug that prevented me from streaming audio to an AirPort Express (aka “AirTunes.”) Apple was so slow to act on this issue that I feared it was fated to fall through the cracks. I hope anyone who is experiencing this issue can put it to rest.

Posted by ML on March 13, 2009 at 12:06 PM (CDT)

2

I have not been able to get an answer, even from the Apple Store. I have ITunes 8 and it seems to take forever for it to open. Is this typical of this program. If you happen to know if this is the case when the program is loaded on a PC Running Windows XP Home addition..Thank you in advance for any help or advise.

Posted by Alan Jonas on March 13, 2009 at 11:00 PM (CDT)

3

8.1 seems to be causing havoc with Multi-user accounts (Me, my wife and 3 kids). The other users get an 13008 error.